[Samba] User's groups issue

Ephi Dror Ephi.Dror at datadomain.com
Thu Aug 28 00:32:36 GMT 2008


Just to clarify,

You still need the following right, (it was not in your last simplified patch)

diff --git a/source/winbindd/winbindd_pam.c b/source/winbindd/winbindd_pam.c
index ce6a256..90849b5 100644
--- a/source/winbindd/winbindd_pam.c
+++ b/source/winbindd/winbindd_pam.c
@@ -1599,8 +1599,8 @@ process_result:
                        goto done;
                }

-               netsamlogon_cache_store(name_user, info3);
                wcache_invalidate_samlogon(find_domain_from_name(name_domain), info3);
+               netsamlogon_cache_store(name_user, info3);

                /* save name_to_sid info as early as possible (only if
                   this is our primary domain so we don't invalidate
@@ -1941,8 +1941,8 @@ enum winbindd_result winbindd_dual_pam_auth_crap(struct winbindd_domain *domain,

        if (NT_STATUS_IS_OK(result)) {

-               netsamlogon_cache_store(name_user, info3);
                wcache_invalidate_samlogon(find_domain_from_name(name_domain), info3);
+               netsamlogon_cache_store(name_user, info3);

                /* Check if the user is in the right group */

Thanks
Ephi


-----Original Message-----
From: Jeremy Allison [mailto:jra at samba.org]
Sent: Wednesday, August 27, 2008 4:59 PM
To: Ephi Dror
Cc: Jeremy Allison; Gerald (Jerry) Carter; Hames at samba.org; samba-technical at lists.samba.org; Hames Kurma
Subject: Re: [Samba] User's groups issue

On Wed, Aug 27, 2008 at 04:38:43PM -0700, Ephi Dror wrote:
>
> To conclude:
> ===============
>
> 1. I think the code I suggest should be the right code in samlogon_cache.c
> 2. We should remove the call to wcache_invalidate_samlogon()
> 3. Additional function has to be added to take care of U/sid and UG/sid cleanup.

Simplified version of the previous patch that acheives this.
Please review !

Jeremy.


More information about the samba-technical mailing list